This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/yI_sQi09bI0wEcczv9p69pOMi4I.roa File: yI_sQi09bI0wEcczv9p69pOMi4I.roa (raw, json) Hash identifier: eG5dij8lJvkaSq+tZToxmG67gJ6Yw6xpufVtIpPZnsg= Subject key identifier: C8:8F:EC:42:2D:3D:6C:8D:30:11:C7:33:BF:DA:7A:F6:93:8C:8B:82 Certificate issuer: /CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c Certificate serial: 019ABB82137C7331919DCCBE0FA032699563 Authority key identifier: 71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/yI_sQi09bI0wEcczv9p69pOMi4I.roa Signing time: Tue 25 Nov 2025 14:54:15 +0000 ROA not before: Tue 25 Nov 2025 14:54:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205463 IP address blocks: 84.54.13.0/24 maxlen: 24 176.98.41.0/24 maxlen: 24 193.31.116.0/24 maxlen: 24 213.226.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bb:82:13:7c:73:31:91:9d:cc:be:0f:a0:32:69:95:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c Validity Not Before: Nov 25 14:54:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c88fec422d3d6c8d3011c733bfda7af6938c8b82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:26:0d:70:1a:ca:ac:99:5c:be:fd:13:b2:5b: c5:69:3b:88:04:34:8f:8b:16:ca:96:e9:2f:72:b0: 45:d6:10:54:17:00:64:51:c8:dc:5e:01:fa:f7:9c: a8:86:d5:e8:b5:03:ab:23:39:32:d7:7e:f9:17:af: 37:bd:d3:4c:ec:46:7b:80:0f:01:e6:04:66:e8:f0: ce:bd:da:64:85:b4:4c:49:1b:4f:5f:8c:52:a4:52: a7:2b:c6:b4:bf:bc:3c:bc:56:4b:e4:e2:d2:56:b0: d5:08:ed:9e:24:08:d4:6b:9c:03:ea:5b:0c:71:51: 9e:14:15:3d:71:c5:d1:c4:b3:10:1a:63:6f:c9:e9: c8:5a:b0:fb:d9:9f:e1:a5:06:2d:e3:d0:84:f7:12: 15:a1:38:0b:2e:67:96:bf:60:a4:0e:83:30:27:d6: d6:20:d3:61:b5:91:0c:9d:ab:b3:c6:50:86:2f:77: 8e:68:8f:69:30:9e:8a:72:8a:ce:55:2c:2c:09:d8: 4e:a8:c4:d6:2d:c3:28:ad:0e:3e:bb:c1:8f:2f:12: 36:83:5b:30:06:65:aa:a1:ad:26:29:1d:4a:f7:3d: a1:bc:07:17:33:36:89:36:3b:c1:02:ba:1e:6e:02: dc:35:92:b2:91:89:54:03:4a:24:93:05:f7:62:46: 3a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:8F:EC:42:2D:3D:6C:8D:30:11:C7:33:BF:DA:7A:F6:93:8C:8B:82 X509v3 Authority Key Identifier: keyid:71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/yI_sQi09bI0wEcczv9p69pOMi4I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.54.13.0/24 176.98.41.0/24 193.31.116.0/24 213.226.119.0/24 Signature Algorithm: sha256WithRSAEncryption 46:69:a4:3b:b2:9a:a5:e5:0b:92:d5:1c:ca:a9:7d:44:37:ed: 43:d1:ee:8e:0d:29:c8:15:2a:09:87:ff:4a:6b:a7:11:05:d8: 4c:86:08:8f:21:e7:1f:10:76:7e:a0:9a:09:31:8e:36:72:47: f1:72:3a:7c:57:ab:1f:99:39:aa:6e:0e:8a:46:fc:01:8d:8a: 4f:2c:dc:79:ac:c1:74:41:05:e6:8a:e7:e2:de:21:55:ce:bc: 99:10:66:b3:57:46:59:7b:77:b5:c6:47:89:c4:dd:ec:4c:98: a7:21:5a:62:63:04:0b:b9:5b:b1:db:b4:b1:48:04:50:3b:3a: e4:d4:50:3c:ad:18:54:14:9b:0b:9a:54:3a:89:2a:d6:80:27: fe:a3:ba:b2:0c:31:96:22:32:cd:73:9a:8e:a1:4a:d3:cc:ff: eb:d6:da:55:57:05:17:f9:31:52:b5:22:25:d2:0e:90:d1:dc: f4:22:8f:fb:7d:00:2d:83:66:d4:59:3a:b6:2a:b4:82:3b:a2: 38:2f:3f:f1:cd:69:69:0f:84:2b:1a:29:8e:8f:4e:93:c7:ce: 56:c9:f5:9b:2f:4f:d0:b7:38:f6:f2:82:d7:9b:cb:b2:a8:45: 23:b1:82:e4:04:80:34:bb:1a:b8:f7:ef:ee:7e:e2:b4:3b:a0: 76:13:ea:da -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZq7ghN8czGRncy+D6AyaZVjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYTI3MzliMjBjMjU5YzVkMWIzODhkMTQ1M2Y2ZjE3OTlm MjhmNmMwHhcNMjUxMTI1MTQ1NDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODhmZWM0MjJkM2Q2YzhkMzAxMWM3MzNiZmRhN2FmNjkzOGM4YjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiYNcBrKrJlcvv0TslvFaTuIBDSP ixbKlukvcrBF1hBUFwBkUcjcXgH695yohtXotQOrIzky1375F683vdNM7EZ7gA8B 5gRm6PDOvdpkhbRMSRtPX4xSpFKnK8a0v7w8vFZL5OLSVrDVCO2eJAjUa5wD6lsM cVGeFBU9ccXRxLMQGmNvyenIWrD72Z/hpQYt49CE9xIVoTgLLmeWv2CkDoMwJ9bW INNhtZEMnauzxlCGL3eOaI9pMJ6KcorOVSwsCdhOqMTWLcMorQ4+u8GPLxI2g1sw BmWqoa0mKR1K9z2hvAcXMzaJNjvBAroebgLcNZKykYlUA0okkwX3YkY6OwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFMiP7EItPWyNMBHHM7/aevaTjIuCMB8GA1UdIwQY MBaAFHGic5sgwlnF0bOI0UU/bxeZ8o9sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2FKem15RENXY1hSczRqUlJUOXZGNW55ajJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC80OTlkZjMtYmQ0Zi00ZTQwLThmODIt YTM4NTU1MDVlYTJlLzEveUlfc1FpMDliSTB3RWNjenY5cDY5cE9NaTRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC80OTlkZjMtYmQ0Zi00ZTQwLThmODItYTM4NTU1MDVlYTJl LzEvY2FKem15RENXY1hSczRqUlJUOXZGNW55ajJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAVDYNAwQA sGIpAwQAwR90AwQA1eJ3MA0GCSqGSIb3DQEBCwUAA4IBAQBGaaQ7spql5QuS1RzK qX1EN+1D0e6ODSnIFSoJh/9Ka6cRBdhMhgiPIecfEHZ+oJoJMY42ckfxcjp8V6sf mTmqbg6KRvwBjYpPLNx5rMF0QQXmiufi3iFVzryZEGazV0ZZe3e1xkeJxN3sTJin IVpiYwQLuVux27SxSARQOzrk1FA8rRhUFJsLmlQ6iSrWgCf+o7qyDDGWIjLNc5qO oUrTzP/r1tpVVwUX+TFStSIl0g6Q0dz0Io/7fQAtg2bUWTq2KrSCO6I4Lz/xzWlp D4QrGimOj06Tx85WyfWbL0/Qtzj28oLXm8uyqEUjsYLkBIA0uxq49+/ufuK0O6B2 E+ra -----END CERTIFICATE-----Generated at Sat Dec 6 11:53:30 2025 by rpki-client